
$ rpki-client -vvvf rpkica.twnic.tw/rpki/BEIDOU/1/06068E54F196F9CB56DECEC6BDF81F4E477ABF5C.mft
File: 06068E54F196F9CB56DECEC6BDF81F4E477ABF5C.mft (raw, json)
Hash identifier: Yt7Ar36TlqBlU+gteyIXTxRJbgLz+CTEB5zcU2AzaaQ=
Subject key identifier: 7F:E4:16:31:72:C0:1D:06:5F:9E:8D:73:88:33:34:14:45:4D:2C:4B
Authority key identifier: 06:06:8E:54:F1:96:F9:CB:56:DE:CE:C6:BD:F8:1F:4E:47:7A:BF:5C
Certificate issuer: /CN=06068E54F196F9CB56DECEC6BDF81F4E477ABF5C
Certificate serial: 3A5E24AB0C0767B6DA9E7B7B3A6145BC8EF729DE
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/06068E54F196F9CB56DECEC6BDF81F4E477ABF5C.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/BEIDOU/1/06068E54F196F9CB56DECEC6BDF81F4E477ABF5C.mft
Manifest number: BF
Signing time: Wed 23 Sep 2026 11:47:44 +0000
Manifest this update: Wed 23 Sep 2026 11:42:44 +0000
Manifest next update: Thu 24 Sep 2026 12:24:44 +0000
Files and hashes: 1: 3136302e33302e37382e302f32332d3332203d3e20313331363537.roa (hash: Zhs1kOvnuZIjhp0oL6F9+ootWaxyP6qoJ2WZeRrbEm4=)
2: 3136302e33302e37382e302f32332d3332203d3e203338383535.roa (hash: +lIg2evgvfalryJ8lpt7wsd6joebOkUR6Y98WeA5Jdg=)
3: 3136302e33302e37382e302f32332d3332203d3e20313532363131.roa (hash: uMXh1FWV1RSCRcyRNUju4l4DsT5cYFrGKXMvmIV7BLs=)
4: 3136302e33302e37382e302f32332d3332203d3e20313334383233.roa (hash: UG8caxZqepVb+RMYX+fTPdsFRGJq9XUxEtSCx0a5QtY=)
5: 3136302e33302e37382e302f32332d3332203d3e203130313333.roa (hash: 7Je86sMchgYrmuH35GJN69x2y8hjmkP+HJO7+VYUwEM=)
6: 06068E54F196F9CB56DECEC6BDF81F4E477ABF5C.crl (hash: KDCbpmdIGmf5pxgMX65UjvQVC1ZDVUjM0+yHrvi8vJ0=)
7: 3136302e33302e37382e302f32332d3332203d3e203137343038.roa (hash: CuSCoz+B9kOtQiiebXf4SYUoQ5yR/B7hKVta2ybaqW4=)
8: 3136302e33302e37382e302f32332d3332203d3e2036393339.roa (hash: by+sSGTQLPLkEdizMA77jzwmp9S3ywOw9dBG6nJb10U=)
9: 3136302e33302e37382e302f32332d3332203d3e20313734.roa (hash: gMLz1jhislEKkPKVX2TZhH//DbARthM4fmws4G0wx2A=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/BEIDOU/1/06068E54F196F9CB56DECEC6BDF81F4E477ABF5C.crl
rsync://rpkica.twnic.tw/rpki/BEIDOU/1/06068E54F196F9CB56DECEC6BDF81F4E477ABF5C.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/06068E54F196F9CB56DECEC6BDF81F4E477ABF5C.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 12:24:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:5e:24:ab:0c:07:67:b6:da:9e:7b:7b:3a:61:45:bc:8e:f7:29:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06068E54F196F9CB56DECEC6BDF81F4E477ABF5C
Validity
Not Before: Sep 23 11:42:44 2026 GMT
Not After : Sep 24 12:24:44 2026 GMT
Subject: CN=7FE4163172C01D065F9E8D7388333414454D2C4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:82:8c:a2:e9:d8:81:f4:ee:81:42:a0:dd:25:
42:0f:ee:49:5d:a2:a6:37:b4:c0:f1:53:fb:d4:b9:
93:50:c6:32:98:7c:ac:fb:f8:a4:9c:75:d7:78:3e:
85:e5:83:11:ce:67:5f:5c:7c:6c:69:2a:26:c8:51:
58:90:de:15:90:6d:1c:a5:f8:ec:08:b8:e6:e3:71:
c2:d0:b1:2a:ef:5e:e4:a7:a1:2b:4c:2a:ec:06:7c:
4a:3e:97:ae:16:dc:34:93:9b:f7:4c:9b:02:d4:0a:
8d:af:11:f6:36:46:75:61:1d:e4:38:0c:cb:a8:2b:
bb:cf:05:f4:b4:f6:45:2f:a7:3d:09:df:a2:e5:ab:
5f:6b:5b:e7:c9:b2:48:33:f9:4e:97:57:28:35:e7:
46:5b:9b:48:72:e3:df:36:90:83:28:3c:10:e2:41:
98:8c:51:5c:1b:3b:6c:e0:55:fe:10:04:2a:1a:6e:
4a:f1:00:1a:44:5b:40:8e:11:bc:6f:1f:79:a0:4a:
ec:01:b5:84:4b:c4:fb:39:0b:a1:ae:5b:c9:95:7a:
2c:7f:97:75:39:02:2f:b5:96:36:63:4f:b7:59:eb:
18:02:64:0b:84:e3:e6:01:71:b5:d3:c6:44:f1:45:
78:36:e0:16:55:2f:f8:32:70:39:44:79:b0:69:38:
cc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E4:16:31:72:C0:1D:06:5F:9E:8D:73:88:33:34:14:45:4D:2C:4B
X509v3 Authority Key Identifier:
keyid:06:06:8E:54:F1:96:F9:CB:56:DE:CE:C6:BD:F8:1F:4E:47:7A:BF:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/BEIDOU/1/06068E54F196F9CB56DECEC6BDF81F4E477ABF5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/06068E54F196F9CB56DECEC6BDF81F4E477ABF5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BEIDOU/1/06068E54F196F9CB56DECEC6BDF81F4E477ABF5C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:35:01:c6:a4:f3:4f:e5:93:b0:4a:c8:3d:e0:4c:1c:dd:54:
4c:dc:43:19:05:48:d5:7b:60:28:1c:eb:3e:9f:36:0b:9b:32:
03:ae:80:3a:62:37:2f:96:6d:f9:43:a5:8e:4a:ad:5a:1e:e7:
96:93:a0:fe:52:06:49:a5:f4:45:31:ab:b6:78:1f:a8:f9:ec:
d8:98:d9:97:77:f3:e1:e5:ea:77:e7:aa:2c:d4:f5:ee:b8:cb:
bb:d0:5d:9b:60:06:14:48:8a:d2:1d:54:ae:0b:7e:9f:63:69:
2f:4a:45:2c:98:b5:f6:95:1c:0d:d8:b6:35:af:f3:94:90:0e:
b7:5c:d2:ed:07:7a:fa:e4:22:87:a7:71:32:61:f8:3c:f0:cb:
e9:35:99:e2:18:1a:63:04:0d:bb:c1:68:55:eb:02:77:fe:9d:
cd:be:f0:66:2a:3e:d0:45:93:fb:b1:51:86:18:16:cd:4d:b4:
c2:dd:cc:af:60:ce:e5:6c:cc:49:f1:d3:88:28:d0:65:33:ed:
81:92:b0:8c:15:7a:5d:35:63:46:2f:26:e5:e8:f0:f2:0f:5d:
36:11:a5:65:a3:8d:90:a9:26:11:0c:87:82:0e:50:8a:f2:0b:
5d:33:eb:51:55:75:d9:d3:2d:a7:77:d4:a8:3a:83:ec:30:dd:
43:56:89:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:23:35 2026 by rpki-client